Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/4UVUxrylXOqYFTplrkVGaLkQdO8.roa
File: 4UVUxrylXOqYFTplrkVGaLkQdO8.roa (raw, json)
Hash identifier: qw2FXhZFvLfS4EGtcmaNUElLTSFL+hzHO1eteGbIYT8=
Subject key identifier: E1:45:54:C6:BC:A5:5C:EA:98:15:3A:65:AE:45:46:68:B9:10:74:EF
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019F03B0587BF2145B57ED870A0B555FF37E
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/4UVUxrylXOqYFTplrkVGaLkQdO8.roa
Signing time: Fri 26 Jun 2026 11:28:36 +0000
ROA not before: Fri 26 Jun 2026 11:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 195.123.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:b0:58:7b:f2:14:5b:57:ed:87:0a:0b:55:5f:f3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jun 26 11:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e14554c6bca55cea98153a65ae454668b91074ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:85:48:bf:99:da:29:47:19:03:ff:ec:b8:
3c:3c:8f:8f:5c:d3:d7:fe:73:3f:51:c8:3b:4b:4a:
fd:78:4c:60:12:61:be:73:74:26:57:d4:96:c1:3e:
37:00:ac:62:0b:47:b1:45:b9:28:66:a8:27:e3:9e:
6b:74:1a:08:0a:b7:b1:36:7a:a8:b2:0b:34:0a:54:
dd:86:9b:c2:8b:48:97:86:d0:d1:fa:0f:2b:7b:22:
66:c8:8c:78:0d:6b:6c:d6:97:78:4b:a2:d2:b6:41:
76:f2:4a:42:73:eb:6b:8c:e3:0e:ac:49:c4:0b:66:
ac:db:a6:e8:7b:d6:2c:ec:f5:56:71:85:8a:b1:55:
f7:ee:93:dc:c0:30:e8:c8:67:32:67:a9:71:66:3b:
ab:d3:6e:72:29:ee:57:1f:cf:6f:9e:d1:1b:78:ee:
c6:31:15:c6:2b:a6:8d:62:71:34:e5:6c:30:13:d5:
c0:66:c8:b3:ab:a9:34:20:18:30:23:74:3a:bf:ab:
d7:ea:1b:08:f2:f1:44:c9:f7:7c:5d:0a:d0:94:9c:
2d:4d:fc:a6:b2:1c:6c:08:06:92:d9:5f:a2:b3:b5:
3f:9e:99:ef:75:43:c0:28:1d:f0:1c:46:89:6b:ab:
1c:95:ff:69:46:33:2b:4b:a5:de:55:23:31:36:41:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:45:54:C6:BC:A5:5C:EA:98:15:3A:65:AE:45:46:68:B9:10:74:EF
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/4UVUxrylXOqYFTplrkVGaLkQdO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.4.0/24
Signature Algorithm: sha256WithRSAEncryption
72:10:2d:e1:46:15:68:c7:b6:96:7c:ba:42:06:20:2d:09:0e:
b9:25:b5:23:99:e8:1a:ba:38:1d:23:8c:47:89:eb:31:86:55:
ee:8b:ce:84:20:42:ae:d4:72:1b:7e:d4:f0:8d:91:53:1d:09:
73:4b:6a:c2:a6:7c:30:b9:7a:f3:a1:e2:ac:ae:97:7c:bc:7a:
7a:fa:85:e7:3c:59:d1:71:aa:6a:26:10:a8:cd:76:9b:68:94:
0a:30:85:28:5a:e4:d2:f6:26:1b:c2:81:c6:7c:04:10:47:b0:
d8:5d:75:b7:f3:25:46:d4:99:3b:e2:9a:1f:aa:d9:e5:10:33:
3e:2a:81:cb:1a:5e:a2:76:9b:0b:f7:b8:01:f6:c9:32:39:9b:
bb:f6:9a:0f:23:6f:8b:23:9a:12:b2:f7:bf:26:05:19:55:34:
67:30:77:9f:93:3d:9a:7d:eb:77:25:07:b8:4c:25:88:a9:8d:
59:40:a9:82:5c:f7:56:67:b3:97:fe:f5:71:0c:4a:c1:30:b1:
bf:7e:c7:de:2b:fd:b5:a2:4d:48:1e:ca:57:c6:6b:77:97:d0:
29:a3:ff:eb:4f:d6:c5:61:cb:f8:cc:57:bd:3e:14:ea:ec:0b:
aa:55:57:85:e4:c1:a6:f9:ef:25:76:00:71:1a:d6:40:25:b3:
fc:cc:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:40:48 2026 by rpki-client